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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 07 July 2009 has been entered. 

Response to Amendment 

2. Applicant's amendment filed 07 July 2009 amends claims 1, 13, 14, 19, and 20. Claim 12 
has been cancelled. Applicant's amendment has been fully considered and entered. 

Response to Arguments 

3. Applicant's arguments with respect to claims have been considered but are moot in view 
of the new ground(s) of rejection. 

Claim Rejections - 35 USC §103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

5. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 
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2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

6. Claims 1-6, 13-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lupper, U.S. Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in 
view of Borgelt, U.S. Patent No. 5,398,285, and further in view of Challener, U.S. Patent No. 
6,470,454. Referring to claims 1,13, Lupper discloses a generic WLAN architecture wherein a 
subscriber name and password are obtained from the subscriber and compared to locally 
available subscriber data records ([0078]), which meets the limitation of creating a password for 
a client, storing the password and identification information of the client on a public wireless 
local area network. The subscriber name and password are compared with the data records to 
determine whether the subscriber can use services in the local area network ([0080]), which 
meets the limitation of utilizing the password and the client identity information to authenticate 
the client in the public wireless local area network. Lupper does not disclose that the passwords 
are one-time entropy passwords. However, it would have been obvious to one of ordinary skill in 
the art at the time the invention was made to use one-time entropy passwords in the WLAN of 
Lupper in order to reduce the security risks that are introduced from using fixed user information 
by using single use passwords that cannot be reused by an intruder as taught by Chang (Col. 2, 
lines 12-24). Lupper and Chang do not specify passwords that are generated using an identifier, 
encryption key, and a character string. Borgelt discloses passwords generated utilizing an 
identifier (Figure 2, 200), encryption key (Figure 2, 202), and a software code (Figure 2, 201). It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
generate the passwords of Lupper, as modified with Chang, with an identifier, key, and addition 
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character string, in order to utilize passwords that are unique to users and not easily obtainable as 
taught by Borgelt (Col. 2, lines 7-11). Lupper, Change, and Borgelt do not disclose hashing the 
calculation to generate the password by converting non-alphanumerics to alphanumerics. 
Challener discloses generating passwords by calculating a hash value and converting all non- 
alphanumerics to alphanumerics (Col. 4, line 24 & Col. 5, lines 10-15), which meets the 
limitation of creating comprises calculating a hash value using SHA-1 hashing process, 
comprising a plurality of octet values and subsequently converting any non-alphanumeric octet 
values of the plurality of octet values of the hash value into an alphanumeric octet value. It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
hash the calculation of Borgelt and convert the hash into alphanumerics in order to provide a 
simple, yet very effective way to manage security passwords for a population of centrally- 
managed computers as taught by Challener (Col. 4, lines 27-30, 39-41). 

Referring to claim 2, Lupper discloses utilizing the RADIUS protocol ([0083]), which 
meets the limitation of the authentication is provide by a Remote Authentication Dial-In User 
Server (RADIUS) server. 

Referring to claims 3-5, Lupper discloses that authentication includes utilizing a SIM 
card in communications with a server ([0092]), which meets the limitation of authenticating the 
client by a server associated with said WPAN based on a smart card/universal subscriber identity 
module card/subscriber identity module card. 

Referring to claim 6, Lupper discloses that a database exists for billing purposes with 
respect to the services ([0080]), which meets the limitation of modifying accounting data from 
the public wireless local area network to include charging data record fields for the client. 
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Referring to claim 14, Lupper discloses a generic WLAN architecture wherein a 
subscriber name and password are obtained from the subscriber and compared to locally 
available subscriber data records ([0078]), which meets the limitation of a first adapter for 
generating a password for the client. The subscriber name and password are compared with the 
data records to determine whether the subscriber can use services in the local area network 
([0080]). Authentication is performed by a RADIUS server ([0051]), which meets the limitation 
of wherein the password is used for authenticating the client by a Remote Authentication Dial-In 
User Service (RADIUS) server. Lupper discloses that authentication includes utilizing a SIM 
card in communications with a server ([0092]), which meets the limitation of a smart card for a 
client. Lupper does not disclose that the passwords are one-time passwords. However, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made to use 
one-time entropy passwords in the WLAN of Lupper in order to reduce the security risks that are 
introduced from using fixed user information by using single use passwords that cannot be 
reused by an intruder as taught by Chang (Col. 2, lines 12-24). Lupper and Chang do not specify 
passwords that are generated using an identifier, encryption key, and a character string. Borgelt 
discloses passwords generated utilizing an identifier (Figure 2, 200), encryption key (Figure 2, 
202), and a software code (Figure 2, 201). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to generate the passwords of Lupper, as modified with 
Chang, with an identifier, key, and addition character string, in order to utilize passwords that are 
unique to users and not easily obtainable as taught by Borgelt (Col. 2, lines 7-11). Lupper and 
Chang do not specify passwords that are generated using an identifier, encryption key, and a 
character string. Borgelt discloses passwords generated utilizing an identifier (Figure 2, 200), 



Application/Control Number: 1 0/82 1 ,435 Page 6 

Art Unit: 2432 

encryption key (Figure 2, 202), and a software code (Figure 2, 201). It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to generate the passwords of 
Lupper, as modified with Chang, with an identifier, key, and addition character string, in order to 
utilize passwords that are unique to users and not easily obtainable as taught by Borgelt (Col. 2, 
lines 7-11). Lupper, Change, and Borgelt do not disclose hashing the calculation to generate the 
password by converting non-alphanumerics to alphanumerics. Challener discloses generating 
passwords by calculating a hash value and converting all non-alphanumerics to alphanumerics 
(Col. 4, line 24 & Col. 5, lines 10-15), which meets the limitation of creating comprises 
calculating a hash value using SHA-1 hashing process, comprising a plurality of octet values and 
subsequently converting any non-alphanumeric octet values of the plurality of octet values of the 
hash value into an alphanumeric octet value. It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to hash the calculation of Borgelt and convert the 
hash into alphanumerics in order to provide a simple, yet very effective way to manage security 
passwords for a population of centrally-managed computers as taught by Challener (Col. 4, lines 
27-30, 39-41). 

Referring to claim 15, Lupper discloses that authentication includes utilizing a SIM card 
in communications with a server ([0092]), which meets the limitation of a second adapter for 
authenticating the client by a second server based on the smart card. 
7. Claims 7-11, 16, 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lupper, U.S. Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in 
view of Borgelt, U.S. Patent No. 5,398,285, and in further view of Lupien, U.S. Patent No. 
6,463,055. Referring to claims 7-9, 16, Lupper does not disclose where or how the passwords are 
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generated. Lupien discloses a wireless network authentication system wherein a password is 
generated at a first station and compared with a password generated by a mobile terminal using 
the IMSI of the mobile terminal to authenticate the mobile terminal to access the network (Col. 
10, line 56 - Col. 11, line 10), which meets the limitation of creating is independently performed 
by each of two entities, creating comprises utilizing international mobile subscriber identity 
(IMSI) of the client, creating comprises utilizing a pseudonym of the client, the first and second 
adapters reside on separate devices, a fourth adapter for generating the password for the client. It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
substitute the password of Lupper with the password of Lupien because such a modification 
would have yielded the predictable result of mobile terminal authentication. 

Referring to claims 10-11, Lupper does not disclose where or how the passwords are 
generated. Lupien discloses a wireless network authentication system wherein a password is 
generated utilizing cipher keys (Col. 10, lines 58-61), which meets the limitation of creating 
comprises utilizing Point-to-Point Encryption Send-Key/Recv-Key. It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to substitute the password of 
Lupper with the password of Lupien because such a modification would have yielded the 
predictable result of mobile terminal authentication. 

8. Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lupper, U.S. 
Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in view of Borgelt, 
U.S. Patent No. 5,398,285, and in further view of Kalavade, U.S. Publication No. 2003/0051041. 
Referring to claim 17, Lupper discloses utilizing RADIUS and GPRS environments but does not 
disclose modifying RADIUS accounting data to generate GPRS accounting data. Kalavade 
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discloses modifying RADIUS accounting data to generate GPRS accounting data ([0233]). It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify RADIUS accounting information in Lupper to generate GPRS accounting information in 
order to provide combined LAN/WAN based authentication on a single account and receive a 
single bill as taught by Kalavade ([0063]-[0066]). 

9. Claims 19, 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Lupper, 
U.S. Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in view of 
Lupien, U.S. Patent No. 6,463,055, in view of Borgelt, U.S. Patent No. 5,398,285, in view of 
Challener, U.S. Patent No. 6,470,454, and further in view of Kalavade, U.S. Publication No. 
2003/0051041. Referring to claims 19, 20, Lupper discloses a generic WLAN architecture 
wherein a subscriber name and password are obtained from the subscriber and compared to 
locally available subscriber data records ([0078]), which meets the limitation of creating a 
password for a client, storing the password and identification information on a RADIUS server. 
The subscriber name and password are compared with the data records to determine whether the 
subscriber can use services in the local area network ([0080]). Authentication is performed by a 
RADIUS server ([005 1]), which meets the limitation of utilizing the password and the 
identification information to authenticate the client on the RADIUS server. Lupper discloses that 
authentication includes utilizing a SIM card in communications with a server ([0092]), which 
meets the limitation of a smart card for a client. Lupper does not disclose that the passwords are 
one-time passwords. However, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to use one-time entropy passwords in the WLAN of Lupper in 
order to reduce the security risks that are introduced from using fixed user information by using 
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single use passwords that cannot be reused by an intruder as taught by Chang (Col. 2, lines 12- 
24). Chang does not disclose generating the one-time passwords using client identification 
information. Lupien discloses a wireless network authentication system wherein a password is 
generated at a first station and compared with a password generated by a mobile terminal using 
the IMSI of the mobile terminal to authenticate the mobile terminal to access the network (Col. 
10, line 56 - Col. 11, line 10), which meets the limitation of creating a password for a client 
based on identification information of the client. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to generate the one-time passwords suggested 
by Chang using the user identification information of Lupper because such a modification would 
have yielded the predictable result of mobile terminal authentication. Lupper and Chang do not 
specify passwords that are generated using an identifier, encryption key, and a character string. 
Borgelt discloses passwords generated utilizing an identifier (Figure 2, 200), encryption key 
(Figure 2, 202), and a software code (Figure 2, 201), which meets the limitation of an encryption 
key provided by the WPAN, and a text character string, the encryption key provided by the 
WPAN is Point-to-Point Encryption Send-Key. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to generate the passwords of Lupper, as 
modified with Chang, with an identifier, key, and addition character string, in order to utilize 
passwords that are unique to users and not easily obtainable as taught by Borgelt (Col. 2, lines 7- 
11). Lupper, Change, and Borgelt do not disclose hashing the calculation to generate the 
password by converting non-alphanumerics to alphanumerics. Challener discloses generating 
passwords by calculating a hash value and converting all non-alphanumerics to alphanumerics 
(Col. 4, line 24 & Col. 5, lines 10-15), which meets the limitation of creating comprises 
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calculating a hash value using SHA-1 hashing process, comprising a plurality of octet values and 
subsequently converting any non-alphanumeric octet values of the plurality of octet values of the 
hash value into an alphanumeric octet value. It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to hash the calculation of Borgelt and convert the 
hash into alphanumerics in order to provide a simple, yet very effective way to manage security 
passwords for a population of centrally-managed computers as taught by Challener (Col. 4, lines 
27-30, 39-41). Lupper discloses utilizing RADIUS and GPRS environments but does not 
disclose modifying RADIUS accounting data to generate GPRS accounting data. Kalavade 
discloses modifying RADIUS accounting data to generate GPRS accounting data ([0233]). It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify RADIUS accounting information in Lupper to generate GPRS accounting information in 
order to provide combined LAN/WAN based authentication on a single account and receive a 
single bill as taught by Kalavade ([0063]-[0066]). 

Conclusion 

10. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BENJAMIN E. LANIER whose telephone number is (571)272- 
3805. The examiner can normally be reached on M-Th 7:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2432 



